devrsi0n / chirpy

๐Ÿ’ฌ A privacy-friendly and customizable Disqus (comment system) alternate. ๆณจ้‡้š็งไฟๆŠคๅ’ŒๅฎšๅˆถๅŒ–็š„่ฏ„่ฎบ็ณป็ปŸใ€‚
https://chirpy.dev
GNU Affero General Public License v3.0
555 stars 32 forks source link

fix(deps): update dependency yaml to v2.2.2 [security] - autoclosed #572

Closed renovate[bot] closed 1 year ago

renovate[bot] commented 1 year ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
yaml (source) 2.1.3 -> 2.2.2 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2023-2251

Uncaught Exception in GitHub repository eemeli/yaml starting at version 2.0.0-5 and prior to 2.2.2.


Release Notes

eemeli/yaml ### [`v2.2.2`](https://togithub.com/eemeli/yaml/releases/tag/v2.2.2) [Compare Source](https://togithub.com/eemeli/yaml/compare/v2.2.1...v2.2.2) This patch release includes a fix for an error that could be thrown in `parseDocument` for degenerate input. Otherwise, it's a patch release uplifting a few fixes from the ongoing v2.3 work to v2.2: - Corner case failure in error pretty-printer ([CVE-2023-2251](https://togithub.com/advisories/GHSA-f9xv-q969-pqx4)) - Use correct argument order when stringifying flow collection comments ([#​443](https://togithub.com/eemeli/yaml/issues/443)) - First-line folding for block scalars ([#​422](https://togithub.com/eemeli/yaml/issues/422)) ### [`v2.2.1`](https://togithub.com/eemeli/yaml/releases/tag/v2.2.1) [Compare Source](https://togithub.com/eemeli/yaml/compare/v2.2.0...v2.2.1) - Quote top-level map keys containing document markers ([#​431](https://togithub.com/eemeli/yaml/issues/431)) ### [`v2.2.0`](https://togithub.com/eemeli/yaml/releases/tag/v2.2.0) [Compare Source](https://togithub.com/eemeli/yaml/compare/v2.1.3...v2.2.0) ##### New Features - Add `flowCollectionPadding` toString option ([#​420](https://togithub.com/eemeli/yaml/issues/420)) - Use indicator line for props on block collection values of mappings ([#​425](https://togithub.com/eemeli/yaml/issues/425)) ##### Bugfixes - Minor relaxation of types for custom tags ([#​429](https://togithub.com/eemeli/yaml/issues/429))

Configuration

๐Ÿ“… Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

๐Ÿšฆ Automerge: Disabled by config. Please merge this manually once you are satisfied.

โ™ป Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

๐Ÿ”• Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

vercel[bot] commented 1 year ago

The latest updates on your projects. Learn more about Vercel for Git โ†—๏ธŽ

Name Status Preview Comments Updated (UTC)
chirpy โœ… Ready (Inspect) Visit Preview ๐Ÿ’ฌ Add feedback Jun 4, 2023 10:51am
changeset-bot[bot] commented 1 year ago

โš ๏ธ No Changeset found

Latest commit: d5c01c055eff1946a55ed619a0a9faf338f06ced

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

github-actions[bot] commented 1 year ago

Coverage report for ./apps/main

St.:grey_question:
Category Percentage Covered / Total
๐Ÿ”ด Statements 8.73% 40/458
๐Ÿ”ด Branches 10.23% 9/88
๐Ÿ”ด Functions 4.35% 3/69
๐Ÿ”ด Lines 9.25% 38/411

Test suite run success

2 tests passing in 2 suites.

Report generated by ๐Ÿงชjest coverage report action from d5c01c055eff1946a55ed619a0a9faf338f06ced

relativeci[bot] commented 1 year ago

Job #1363: Bundle Size โ€” 2.1MiB (0%).

655338b(current) vs 5ece64a main#1349(baseline)

:warning: Bundle contains 1 duplicate package

Metrics (1 change)
โ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒ โ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒCurrent
Job #1363
โ€ƒโ€ƒโ€ƒโ€ƒโ€ƒBaseline
Job #1349
Initial JS 1.46MiB 1.46MiB
Initial CSS 99.56KiB 99.56KiB
Cache Invalidation 0% 15.09%
Chunks 51 51
Assets 63 63
Modules 1129 1129
Duplicate Modules 199 199
Duplicate Code 4.9% 4.9%
Packages 123 123
Duplicate Packages 1 1

Total size by type (no changes)
| โ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒ | โ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒCurrent
[Job #1363](https://app.relative-ci.com/projects/rYoEVFddayylGRgFiBEd/jobs/1363-4NmOwWQm2xsDUpYzcQaW?utm_source=github&utm_medium=pr-report "View job report") | โ€ƒโ€ƒโ€ƒโ€ƒโ€ƒBaseline
[Job #1349](https://app.relative-ci.com/projects/rYoEVFddayylGRgFiBEd/jobs/1349-PYdyMpnebJ8RcYe6pROw?utm_source=github&utm_medium=pr-report "View baseline job report") | |:--|--:|--:| | [CSS](https://app.relative-ci.com/projects/rYoEVFddayylGRgFiBEd/jobs/1363-4NmOwWQm2xsDUpYzcQaW/assets?ba=%7B%22filters%22%3A%7B%22ft.CSS%22%3Atrue%2C%22ft.JS%22%3Afalse%2C%22ft.IMG%22%3Afalse%2C%22ft.MEDIA%22%3Afalse%2C%22ft.FONT%22%3Afalse%2C%22ft.HTML%22%3Afalse%2C%22ft.OTHER%22%3Afalse%7D%7D "View all CSS assets") | `99.56KiB` | `99.56KiB` | | [Fonts](https://app.relative-ci.com/projects/rYoEVFddayylGRgFiBEd/jobs/1363-4NmOwWQm2xsDUpYzcQaW/assets?ba=%7B%22filters%22%3A%7B%22ft.CSS%22%3Afalse%2C%22ft.JS%22%3Afalse%2C%22ft.IMG%22%3Afalse%2C%22ft.MEDIA%22%3Afalse%2C%22ft.FONT%22%3Atrue%2C%22ft.HTML%22%3Afalse%2C%22ft.OTHER%22%3Afalse%7D%7D "View all Fonts assets") | `0B` | `0B` | | [HTML](https://app.relative-ci.com/projects/rYoEVFddayylGRgFiBEd/jobs/1363-4NmOwWQm2xsDUpYzcQaW/assets?ba=%7B%22filters%22%3A%7B%22ft.CSS%22%3Afalse%2C%22ft.JS%22%3Afalse%2C%22ft.IMG%22%3Afalse%2C%22ft.MEDIA%22%3Afalse%2C%22ft.FONT%22%3Afalse%2C%22ft.HTML%22%3Atrue%2C%22ft.OTHER%22%3Afalse%7D%7D "View all HTML assets") | `0B` | `0B` | | [IMG](https://app.relative-ci.com/projects/rYoEVFddayylGRgFiBEd/jobs/1363-4NmOwWQm2xsDUpYzcQaW/assets?ba=%7B%22filters%22%3A%7B%22ft.CSS%22%3Afalse%2C%22ft.JS%22%3Afalse%2C%22ft.IMG%22%3Atrue%2C%22ft.MEDIA%22%3Afalse%2C%22ft.FONT%22%3Afalse%2C%22ft.HTML%22%3Afalse%2C%22ft.OTHER%22%3Afalse%7D%7D "View all IMG assets") | `1.45KiB` | `1.45KiB` | | [JS](https://app.relative-ci.com/projects/rYoEVFddayylGRgFiBEd/jobs/1363-4NmOwWQm2xsDUpYzcQaW/assets?ba=%7B%22filters%22%3A%7B%22ft.CSS%22%3Afalse%2C%22ft.JS%22%3Atrue%2C%22ft.IMG%22%3Afalse%2C%22ft.MEDIA%22%3Afalse%2C%22ft.FONT%22%3Afalse%2C%22ft.HTML%22%3Afalse%2C%22ft.OTHER%22%3Afalse%7D%7D "View all JS assets") | `1.99MiB` | `1.99MiB` | | [Media](https://app.relative-ci.com/projects/rYoEVFddayylGRgFiBEd/jobs/1363-4NmOwWQm2xsDUpYzcQaW/assets?ba=%7B%22filters%22%3A%7B%22ft.CSS%22%3Afalse%2C%22ft.JS%22%3Afalse%2C%22ft.IMG%22%3Afalse%2C%22ft.MEDIA%22%3Atrue%2C%22ft.FONT%22%3Afalse%2C%22ft.HTML%22%3Afalse%2C%22ft.OTHER%22%3Afalse%7D%7D "View all Media assets") | `0B` | `0B` | | [Other](https://app.relative-ci.com/projects/rYoEVFddayylGRgFiBEd/jobs/1363-4NmOwWQm2xsDUpYzcQaW/assets?ba=%7B%22filters%22%3A%7B%22ft.CSS%22%3Afalse%2C%22ft.JS%22%3Afalse%2C%22ft.IMG%22%3Afalse%2C%22ft.MEDIA%22%3Afalse%2C%22ft.FONT%22%3Afalse%2C%22ft.HTML%22%3Afalse%2C%22ft.OTHER%22%3Atrue%7D%7D "View all Other assets") | `11.87KiB` | `11.87KiB` |

View job #1363 reportโ€ƒView refs/pull/572/merge branch activity

cypress[bot] commented 1 year ago

2 failed tests on run #1897 โ†—๏ธŽ

2 4 0 1 Flakiness 0

Details:

fix(deps): update dependency yaml to v2.2.2 [security]
Project: chirpy Commit: d5c01c055e
Status: Failed Duration: 02:27 ๐Ÿ’ก
Started: Jun 4, 2023 10:53 AM Ended: Jun 4, 2023 10:55 AM
Failed  home/header.spec.ts โ€ข 1 failed test โ€ข Cypress Actions View Output Video
Test Artifacts
Header > should show user menu Output Screenshots Video
Failed  dashboard/project.spec.ts โ€ข 1 failed test โ€ข Cypress Actions View Output Video
Test Artifacts
Project > should show integration doc Output Screenshots Video

This comment has been generated by cypress-bot as a result of this project's GitHub integration settings.